HP0-Y43 · Question #54
HP HP0-Y43 Exam View the exhibit. A network administrator has activated connection rate filtering on an HP 8200 zl Series switch with the throttle action and medium sensitivity. However, a server…
The correct answer is A. Apply Filter2 to VLAN 10 as a connection rate filter. Applying Connection-Rate ACLs To apply a connection-rate ACL, you use the vlan <vid> ip Eseries(config)# vlan <vid> ip access-group <acl-id> connection-rate-filter A connection-rate ACL is applied at the VLAN level, but the ACL is evaluated for inbound traffic only on ports…
Question
HP HP0-Y43 Exam View the exhibit. A network administrator has activated connection rate filtering on an HP 8200 zl Series switch with the throttle action and medium sensitivity. However, a server connected to port A1 in VLAN 10 (IP address 10.1.10.10) needs to establish many connections with other backend servers as part of its typical behavior. The ports that this server uses are TCP 50000-50020. Based on the information provided in the exhibit, how can the network administrator ensure that this traffic is never blocked while leaving the current protections in effect?
Exhibit
Options
- AApply Filter2 to VLAN 10 as a connection rate filter.
- BApply Filter1 to port A1 as a connection rate filter.
- CApply Filter2 to port A1 as a connection rate filter.
- DApply Filter1 to VLAN 10 as a connection rate filter.
How the community answered
(36 responses)- A69% (25)
- B6% (2)
- C17% (6)
- D8% (3)
Explanation
Applying Connection-Rate ACLs To apply a connection-rate ACL, you use the vlan <vid> ip Eseries(config)# vlan <vid> ip access-group <acl-id> connection-rate-filter A connection-rate ACL is applied at the VLAN level, but the ACL is evaluated for inbound traffic only on ports configured for connection-rate filtering in that VLAN. The ACL has no effect on ports in the VLAN that are not configured for connection-rate filtering. The switch allows only one connection-rate ACL assignment per VLAN. If a connection-rate ACL is already assigned to a VLAN and you assign another connection-rate ACL to that VLAN, the second ACL overwrites the first one. A connection-rate ACL can be used in addition to any standard or extended ACLs already assigned Example Configuration with Connection-Rate ACL ip access-list connection-rate-filter "crf01-server" 10 ignore tcp 10.1.10.10 0.0.0.0 destionation-port eq 1812 exit ip helper-address 10.1.10.10 ip address 10.1.10.1 255.255.255.0 ip access-group "crf01-server" connection-rate-filter exit
Topics
Community Discussion
No community discussion yet for this question.